Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
19-03-2024 04:28
General
-
Target
2024-03-19_26ddb444196de3df82bb2372dddd1dc9_icedid.exe
-
Size
419KB
-
MD5
26ddb444196de3df82bb2372dddd1dc9
-
SHA1
808561b7e90b42b135a216bb426baa819e1e2a2d
-
SHA256
7e6df988d4cc25afa3dfb25b005f1c899cb8c42a362cbb6bd21f2110b0577a8c
-
SHA512
255cabea419c750b804186e6110fb7fa8ef26c26fd1e69491d43fa2e7cb63614ab1189a0ce895499a89a26e3ffa2479c0b1e949ff3811e240e25c5ddf5736c46
-
SSDEEP
12288:/plrVbDdQaqdS/ofraFErH8uB2Wm0SX/Nr5FU:RxRQ+Fucuvm0a/
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-19_26ddb444196de3df82bb2372dddd1dc9_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-19_26ddb444196de3df82bb2372dddd1dc9_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\thatcomes\withthe.exe"C:\Program Files\thatcomes\withthe.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
419KB
MD5f0280d4713ad0a4a7ec50958020bd833
SHA1cb2d9fdef280f99300815473c58c2823219347b9
SHA2569c0e778129137facbec54fe0fc1befc2bc1995131efe5f2fcd9a8c74eb308f22
SHA512760aed3eeab367f0c6f99469f285aa2b5b2420fca68c69416974f87ba3cd2b63fb9bc232213474882b846bb2dd0df8102fdd9fcede75215ea8e04a0d05812c7c
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB